Openvpn question

[kronos911gr]

Hello to all. I have setup an openvpn 2.3.9 server successfully. I have read the openvpn pdf and understand how to create the tar file. Before I upload it to a test phone I would like to clear up some questions I have. My T2x phones are running the 73.0.50 firmware version. I am using easyrsa 3 to generate the key pairs.

My questions are the following.

1. Do the phones support the aes-128-cbc cipher or do I have to use the bf-cbc one.
2. Do the phones support Cryptographic digest mb5 or do I have to change it to sha1, sha256. (easyrsa option set_var EASYRSA_DIGEST)
3. Do the phones support tls-auth (I didn’t see it in the pdf example?)
4. Do the phones support comp-lzo. In the server config it is enabled but in the client it is set to no.
5. Can the phones connect to a vpn server that has topology set to subnet?
6. What openvpn client version do the phones have loaded?
   

Thank you